CVE-2023-46611

CVE-2023-46611 concerns the WordPress YOP Poll plugin (

CVE-2023-46609

CVE-2023-46609 concerns the WordPress FeedFocal plugin (<= 1.2.2), where Missing Authorization/Broken Access Control allows unauthenticated attackers to exploit access-control misconfigurations. Public records indicate affected versions are

CVE-2023-46607

CVE-2023-46607 affects the WP iCal Availability WordPress plugin. Affected versions are

CVE-2023-46606

CVE-2023-46606 pertains to the WordPress AtomChat plugin (AtomChat) with versions

CVE-2023-46605

CVE-2023-46605 – WordPress Convertful plugin : The WordPress plugin “Convertful – Your Ultimate On-Site Conversion Tool” versions

CVE-2023-46206

CVE-2023-46206 pertains to the WordPress MW WP Form plugin (affected versions = 5.0.0, to mitigate. Patch details also note the vulnerability’s low overall severity (CVSS 5.3) and unauthenticated prereq for exploitation. No exploitation status or in-wild indicators are provided in the supplied do...

CVE-2023-46195

CVE-2023-46195 – WordPress Headline Analyzer (CoSchedule)

CVE-2023-46082

CVE-2023-46082 affects the WordPress plugin Broken Link Checker | Finder (Broken Link Checker plugin) up to version 2.4.2. The vulnerability is a Missing Authorization/Broken Access Control issue that allows unauthenticated access to moblc_auth_save_settings, enabling unauthorized actions. Patchs...

CVE-2023-46079

CVE-2023-46079 affects the WordPress Ashe Extra plugin (

CVE-2023-45828

CVE-2023-45828 affects the WordPress RumbleTalk Live Group Chat plugin (versions up to and including 6.2.5). The issue is a Missing/Incorrectly Configured Authorization vulnerability (Broken Access Control) in the plugin’s handling of AJAX/authorization checks (handleRequest and related flows), a...

CVE-2023-45110

CVE-2023-45110 concerns Bold Timeline Lite (WordPress plugin) with a Missing Authorization/Broken Access Control vulnerability present up to version

CVE-2023-45101

CVE-2023-45101 affects CusRev Customer Reviews for WooCommerce (WordPress) up to version 5.36.0. The issue is described as Missing Authorization / Broken Access Control, arising from incorrectly configured access control security levels. Connected sources indicate a low-severity impact (CVSS 4.3,...

CVE-2023-7263

CVE-2023-7263 describes a path traversal vulnerability in Huawei HarmonyOS AILife-related components, notably Huawei home music system products and the HarmonyOS AILife Audio Service platform. The underlying issue allows an attacker to delete files or modify file permissions via crafted requests....

CVE-2020-1821

CVE-2020-1821 concerns Huawei devices implementing the Common Open Policy Service (COPS) protocol. The vulnerability is an out-of-bounds read in the COPS decoding function when processing an incoming data packet, potentially causing a disruption of service on affected devices. The issue is part o...

CVE-2022-21505

CVE-2022-21505: In the Linux kernel IMA, enabling appraisal with ima_appraise=log can bypass lockdown on systems where Secure Boot is disabled or unavailable. IMA blocks ima_appraise=log via boot params when Secure Boot is enabled, but this protection does not cover lockdown used without Secure B...

CVE-2022-32204

CVE-2022-32204 is an improper input verification vulnerability in Huawei printer products. The issue enables remote exploitation over a network with low attack complexity, requiring no privileges and no user interaction, with an impact limited to Availability (CVSS v3.1 base score 7.5, HIGH). The...

CVE-2021-32589

CVE-2021-32589 describes a remote, unauthenticated Use-After-Free in the fgfmsd daemon of Fortinet FortiManager and FortiAnalyzer. The flaw in the fgfm port handling (memory after free) allows a non-authenticated attacker to execute arbitrary code with root privileges by sending a crafted request...

CVE-2021-26093

CVE-2021-26093 corresponds to an uninitialized pointer (CWE-824) vulnerability in Fortinet FortiWLC. According to the sources, FortiWLC versions 8.6.0, 8.5.3 and earlier are affected, and a local, authenticated attacker can crash the access point being managed by the controller by issuing a craft...

CVE-2024-35141

CVE-2024-35141 affects IBM Security Verify Access Docker 10.0.0–10.0.6. Root cause: execution of unnecessary privileges enables local privilege escalation. Impact: local attacker could escalate privileges (high). IBM bulletins indicate fixes in 10.0.7/FP0 or later; remediation is to upgrade to th...

CVE-2021-29827

CVE-2021-29827 | IBM InfoSphere Information Server 11.7 suffers a cross-frame scripting (clickjacking) vulnerability. A remote attacker could entice a user to a malicious page to hijack the user’s click actions, potentially enabling further attacks. Affected product/version: InfoSphere Informatio...